$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: MoSn2L71VRCPSNTXRUiPxaDopTsrlxMXkf/CIBdVoI0= Subject key identifier: 8E:27:D0:D0:50:05:C2:A4:43:B1:A6:54:2A:9A:A7:88:2F:7D:FA:E2 Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 744639F78CEBF3E7144BDB2E78DDCD87C35A21B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 10:21:48 +0000 Manifest this update: Sun 19 Oct 2025 10:16:48 +0000 Manifest next update: Wed 22 Oct 2025 18:34:48 +0000 Files and hashes: 1: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: LO2kumbwexJU0xFX/bo2XWh9z63sHPOpuRSeSJCzcbk=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: NOH9wRK9inkAfrcmkP1Y7WHt1AAQ1F9Kr20Q6/2/AlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:46:39:f7:8c:eb:f3:e7:14:4b:db:2e:78:dd:cd:87:c3:5a:21:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Oct 19 10:16:48 2025 GMT Not After : Oct 22 18:34:48 2025 GMT Subject: CN=8E27D0D05005C2A443B1A6542A9AA7882F7DFAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:f1:8d:3f:46:dd:21:84:a3:32:06:2f:83: f2:9c:51:3d:10:fc:be:e8:74:77:c6:38:17:32:e8: 69:1a:29:a9:67:26:34:fe:47:57:b4:43:ef:94:86: a0:98:ff:05:99:36:74:66:f1:b7:99:4e:a8:7a:8f: 7a:81:ca:61:e6:9e:38:29:d3:5c:a6:e8:e4:a3:49: 62:0c:f8:50:6a:08:22:81:64:5c:49:c4:09:36:80: 79:45:8a:cb:b6:ec:9a:0a:9b:66:e8:75:df:0e:7c: 29:53:ed:5f:f8:c2:f1:67:b3:91:09:95:76:3e:94: 22:50:18:dd:10:1f:49:23:16:97:8a:63:ca:aa:bf: e4:0f:57:b9:b2:11:b6:9c:37:fe:f7:e2:0d:40:15: 8b:4e:82:2b:8c:25:ea:26:12:9c:1c:c3:d6:3d:df: 43:6c:99:ed:76:aa:37:f3:f1:ce:d3:36:ad:d2:f9: 9e:95:c4:13:b7:a4:77:1a:92:ef:d6:a3:e4:be:70: 41:55:c4:06:c1:3e:3c:52:38:8d:9b:1d:7a:54:43: d0:95:eb:ae:9d:c1:de:32:21:11:9b:c5:ea:c4:58: a2:05:b9:f4:b9:8a:71:5d:6f:d4:a7:26:f9:53:67: 51:83:10:f0:56:b1:fa:82:27:ef:5c:6e:7b:ed:22: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:27:D0:D0:50:05:C2:A4:43:B1:A6:54:2A:9A:A7:88:2F:7D:FA:E2 X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:67:fa:19:19:85:b6:f1:6a:75:e5:97:c3:4f:4a:13:56:f1: 30:df:20:11:0d:f6:23:2a:f6:22:f8:a9:d7:a0:67:47:d2:90: 49:32:1e:22:20:2c:c7:73:af:59:71:5f:e3:5c:44:02:fd:27: 6e:8c:28:ef:97:c6:a0:91:e1:2b:29:17:3c:32:29:05:32:16: a0:3e:9d:ce:d1:cb:ce:eb:2c:af:24:0c:b8:c4:0e:65:95:41: ca:66:80:9d:23:af:e7:f6:65:0c:aa:1b:5b:87:c1:f9:ba:90: 73:b1:dd:9f:e7:23:22:fc:31:dd:e1:e8:39:86:30:a9:77:fa: 2f:37:f5:a8:85:9b:29:2d:42:56:5c:36:57:7a:d6:1f:67:47: ee:76:b0:4e:bf:5b:0c:97:a5:df:02:26:b2:78:35:ab:16:1b: 30:e2:ea:4b:a6:ee:3e:c6:2d:c5:5a:1a:53:47:a9:4d:fc:9a: 9b:16:d9:72:67:be:74:27:4f:8b:5c:95:b9:77:81:b6:79:8b: 9c:9b:28:e4:0e:8e:cb:28:ee:d4:76:4f:d7:11:1e:20:37:72: 16:fb:f7:0f:1b:e3:58:18:49:f3:e2:c3:57:f4:d4:3b:31:7e: 82:0c:cd:37:90:44:2e:ba:03:90:d0:d3:64:20:88:4f:7e:9a: 02:fc:7b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEY594zr8+cUS9sueN3Nh8NaIbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTEwMTkxMDE2NDhaFw0yNTEwMjIxODM0NDhaMDMxMTAvBgNV BAMTKDhFMjdEMEQwNTAwNUMyQTQ0M0IxQTY1NDJBOUFBNzg4MkY3REZBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgPGNP0bdIYSjMgYvg/KcUT0Q /L7odHfGOBcy6GkaKalnJjT+R1e0Q++UhqCY/wWZNnRm8beZTqh6j3qBymHmnjgp 01ym6OSjSWIM+FBqCCKBZFxJxAk2gHlFisu27JoKm2bodd8OfClT7V/4wvFns5EJ lXY+lCJQGN0QH0kjFpeKY8qqv+QPV7myEbacN/734g1AFYtOgiuMJeomEpwcw9Y9 30Nsme12qjfz8c7TNq3S+Z6VxBO3pHcaku/Wo+S+cEFVxAbBPjxSOI2bHXpUQ9CV 666dwd4yIRGbxerEWKIFufS5inFdb9SnJvlTZ1GDEPBWsfqCJ+9cbnvtIjj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjifQ0FAFwqRDsaZUKpqniC99+uIwHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRn+hkZhbbxanXll8NPShNW8TDfIBEN9iMq 9iL4qdegZ0fSkEkyHiIgLMdzr1lxX+NcRAL9J26MKO+XxqCR4SspFzwyKQUyFqA+ nc7Ry87rLK8kDLjEDmWVQcpmgJ0jr+f2ZQyqG1uHwfm6kHOx3Z/nIyL8Md3h6DmG MKl3+i839aiFmyktQlZcNld61h9nR+52sE6/WwyXpd8CJrJ4NasWGzDi6kum7j7G LcVaGlNHqU38mpsW2XJnvnQnT4tclbl3gbZ5i5ybKOQOjsso7tR2T9cRHiA3chb7 9w8b41gYSfPiw1f01DsxfoIMzTeQRC66A5DQ02QgiE9+mgL8ew0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:42 2025 by rpki-client